Microsoft update

KB5065435

IE Cumulative

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.000
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.000
Windows Server 2008 for 32-bit Systems Service Pack 2 1.000
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.000
Windows Server 2008 for x64-based Systems Service Pack 2 1.000
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1.000
Windows Server 2012 1.000
Windows Server 2012 (Server Core installation) 1.000
Windows Server 2012 R2 1.000
Windows Server 2012 R2 (Server Core installation) 1.000

TI-2025-34650 CVE-2025-54917 · GHSA-53mm-jh85-77gc

LOW 22

Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00947 Published 2025-09-09 Fixed in 10.0.10240.21128, 10.0.14393.8422 +12 CWE-693

TI-2025-33950 CVE-2025-54107 · GHSA-6gc5-r24c-783h

LOW 22

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00962 Published 2025-09-09 Fixed in 10.0.10240.21128, 10.0.14393.8422 +12 CWE-41